Half of the job is very technical. We like that part, because, quite honestly, we’re good at it. We follow all the protocol required for evidence handling and verification. We use a plethora of tools that allow us to dig in to all kinds of hidden and obscure details, like Windows change and event logs, registry modifications, Internet history, hidden and deleted files, password cracking – all that fun stuff that causes our clients eyes to glaze over – until we produce results.
Which leads to the other half of the job - communication. We understand the communication. When and, more importantly, when not to put things in writing. How to give an accurate estimate. How to frame a cost/benefit discussion to help you make a decision on whether to continue further investigation. What is necessary to be a good testifying expert. How to write an expert report that will stand up to rebuttal. Hell, for that matter, how to write in general. Our corporate resume ranges from complex programming to extensive writing and publishing to successfully building and selling companies.
Click these links to see what we do, and how we can help with your case's discovery.
The Five Stages of Computer Forensics
Forensic eDiscovery
The Costs and Benefits of Forensic Analysis